]> git.ipfire.org Git - thirdparty/suricata.git/commit
projects / thirdparty / suricata.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3442b6d) | patch
stream: improve FIN checking 8678/head
authorVictor Julien <vjulien@oisf.net>
Mon, 3 Apr 2023 09:50:09 +0000 (11:50 +0200)
committerVictor Julien <vjulien@oisf.net>
Tue, 4 Apr 2023 07:59:02 +0000 (09:59 +0200)
commit2c600336ab338e51d566bfc82f4e4131395abf9b
tree86c26d5a992c33cb386e700a6a2bd0539bee4c95tree
parent3442b6da9d0c59e0376d8f0289746c5489c6b381commit | diff
stream: improve FIN checking

After recent next_seq changes, the FIN checks could be too strict
leading to stalling sessions in IPS mode.

This patch requires a FIN to be >= last ack and <= next_win to be
accepted.

(cherry picked from commit 39a6f411e9748e76211b76b1f45b6c1863012972)
src/stream-tcp.c diff | blob | blame | history
Mirror of https://github.com/OISF/suricata.git